$ rpki-client -vvf rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft File: D6344C556CB88A244AE43DD23D620550C754F24F.mft (raw, json) Hash identifier: Yp/u058ZQm5R65p4PMnr2AMG2iIyJUKPU6MUDF6H/Ho= Subject key identifier: AA:5C:39:64:BE:29:C1:EC:0C:CD:48:56:9E:E9:58:5C:DA:58:68:08 Authority key identifier: D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F Certificate issuer: /CN=D6344C556CB88A244AE43DD23D620550C754F24F Certificate serial: 29CFEB5B43347C8A0B3E400FC0681D708858CE02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 08:37:39 +0000 Manifest this update: Thu 18 Jun 2026 08:32:39 +0000 Manifest next update: Fri 19 Jun 2026 11:38:39 +0000 Files and hashes: 1: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: ks4tQxKb/HT7mZZsol2xTOY4z3gIixS1lQAzEE6O77U=) 2: D6344C556CB88A244AE43DD23D620550C754F24F.crl (hash: yvxlByVYLnxeB3MIMF5Gd/NPYp/jHZ4R0IxJGO4JS8Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:cf:eb:5b:43:34:7c:8a:0b:3e:40:0f:c0:68:1d:70:88:58:ce:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6344C556CB88A244AE43DD23D620550C754F24F Validity Not Before: Jun 18 08:32:39 2026 GMT Not After : Jun 19 11:38:39 2026 GMT Subject: CN=AA5C3964BE29C1EC0CCD48569EE9585CDA586808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:78:14:ad:a6:54:2f:0e:e4:83:ca:de:c5: 22:79:4f:e2:d8:f0:d9:9e:ea:1c:7f:84:0c:ed:c9: df:a7:bc:21:5b:08:bd:2d:c2:f3:9b:5d:aa:5d:4e: 12:5d:b0:9b:f3:7e:1c:57:53:2b:4b:6c:e9:a5:b5: 4c:6d:79:44:ab:b0:6a:b5:a0:6c:29:af:8e:c3:e9: 93:b0:20:ac:07:34:29:cf:f7:a3:e1:2c:27:c6:e6: 9b:36:46:7a:a8:b6:9a:6f:4d:1d:73:53:8d:0b:37: 7c:4e:be:a3:68:46:e9:91:18:d1:24:c0:4f:10:55: 43:c1:c6:af:3d:44:8c:57:54:a1:e9:9c:cf:ab:eb: 56:f1:f4:cb:7d:7f:ae:a3:a7:fc:55:0a:65:07:c5: f5:c8:82:0a:3a:84:79:b7:ca:3c:d5:a5:ad:37:c8: a1:f8:1a:25:7b:a3:ee:f9:68:4c:2a:e6:01:b2:01: 54:12:50:14:73:2b:d9:9d:5b:8a:f4:1d:7f:12:05: be:14:fc:b8:17:64:74:39:17:d5:04:c4:f1:a0:03: df:46:77:ec:13:f2:b6:c3:8e:26:43:cb:25:5f:ad: 5c:ab:87:77:a2:91:bd:7e:10:17:d6:b7:55:1d:36: 85:11:5d:94:4b:e1:b6:0d:48:bc:49:59:f4:d6:3e: 31:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:5C:39:64:BE:29:C1:EC:0C:CD:48:56:9E:E9:58:5C:DA:58:68:08 X509v3 Authority Key Identifier: keyid:D6:34:4C:55:6C:B8:8A:24:4A:E4:3D:D2:3D:62:05:50:C7:54:F2:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/D6344C556CB88A244AE43DD23D620550C754F24F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/D6344C556CB88A244AE43DD23D620550C754F24F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:60:40:53:15:2b:c9:69:c5:48:3b:e4:85:e0:fb:d3:4c:31: be:fc:51:53:fb:79:ea:5b:ff:59:1d:4c:57:1f:82:49:b7:2a: 36:24:5f:13:c7:8d:ce:10:3e:a6:df:55:2a:d3:55:ec:e8:2f: a8:e0:3f:4f:85:9a:ab:b3:fa:2a:56:6d:08:7f:12:03:36:86: 7c:05:ad:31:0c:e1:8a:62:3b:f2:d5:c1:5c:ca:b6:06:4d:2b: f1:73:a7:5f:94:51:d1:8e:28:91:78:c0:f1:7f:de:75:1b:9c: 5a:c5:1d:f3:56:90:be:be:01:26:75:30:10:e7:8e:09:66:91: 13:b5:a2:99:21:39:40:55:49:7b:48:38:cb:53:17:39:39:22: 7f:30:82:14:c2:7d:07:de:c8:63:0a:73:3f:98:02:bd:f6:94: 81:c2:cd:e0:08:ed:72:34:4f:be:0a:1e:85:91:40:63:73:6e: 7a:45:44:dc:5d:a7:f2:49:32:c9:dc:4f:1c:2d:ac:0e:80:be: 21:87:83:ce:ec:b7:24:c0:9b:1b:a5:6a:fb:a6:76:a3:ca:82: b5:52:a0:a1:16:32:ab:ba:3c:32:2b:6b:59:c8:e7:e4:96:52: 1e:58:f5:6d:ba:55:40:2d:ad:0a:92:fc:f5:f5:9d:61:8d:ab: 44:83:b5:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKc/rW0M0fIoLPkAPwGgdcIhYzgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBD NzU0RjI0RjAeFw0yNjA2MTgwODMyMzlaFw0yNjA2MTkxMTM4MzlaMDMxMTAvBgNV BAMTKEFBNUMzOTY0QkUyOUMxRUMwQ0NENDg1NjlFRTk1ODVDREE1ODY4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIengUraZULw7kg8rexSJ5T+LY 8Nme6hx/hAztyd+nvCFbCL0twvObXapdThJdsJvzfhxXUytLbOmltUxteUSrsGq1 oGwpr47D6ZOwIKwHNCnP96PhLCfG5ps2RnqotppvTR1zU40LN3xOvqNoRumRGNEk wE8QVUPBxq89RIxXVKHpnM+r61bx9Mt9f66jp/xVCmUHxfXIggo6hHm3yjzVpa03 yKH4GiV7o+75aEwq5gGyAVQSUBRzK9mdW4r0HX8SBb4U/LgXZHQ5F9UExPGgA99G d+wT8rbDjiZDyyVfrVyrh3eikb1+EBfWt1UdNoURXZRL4bYNSLxJWfTWPjG7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqlw5ZL4pwewMzUhWnulYXNpYaAgwHwYDVR0j BBgwFoAU1jRMVWy4iiRK5D3SPWIFUMdU8k8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTcyZDE3NTItNDg1My00Yzc0LWI1NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2 Q0I4OEEyNDRBRTQzREQyM0Q2MjA1NTBDNzU0RjI0Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9ENjM0NEM1NTZDQjg4QTI0NEFFNDNERDIzRDYyMDU1MEM3NTRG MjRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1 NzQtOTk0ZDNiMTI0MDkwLzAvRDYzNDRDNTU2Q0I4OEEyNDRBRTQzREQyM0Q2MjA1 NTBDNzU0RjI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJgQFMVK8lpxUg75IXg+9NMMb78UVP7eepb /1kdTFcfgkm3KjYkXxPHjc4QPqbfVSrTVezoL6jgP0+Fmquz+ipWbQh/EgM2hnwF rTEM4YpiO/LVwVzKtgZNK/Fzp1+UUdGOKJF4wPF/3nUbnFrFHfNWkL6+ASZ1MBDn jglmkRO1opkhOUBVSXtIOMtTFzk5In8wghTCfQfeyGMKcz+YAr32lIHCzeAI7XI0 T74KHoWRQGNzbnpFRNxdp/JJMsncTxwtrA6AviGHg87styTAmxulavumdqPKgrVS oKEWMqu6PDIra1nI5+SWUh5Y9W26VUAtrQqS/PX1nWGNq0SDtYg= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:57 2026 by rpki-client